FortiSwitch D-Series. Secure Access Switches. Highlights

Transcription

1 DATA SHEET FortiSwitch D-Series Secure Access Switches FortiSwitch D-Series FortiSwitch 108D-POE, 124D, 124D-POE, 224D-FPOE, 224D-POE and 548D-FPOE Secure Access Switches FortiSwitch Secure Access switches deliver outstanding security, performance and manageability for threat conscious small to mid-sized businesses, distributed enterprises and branch offices. Tightly integrated into the FortiGate Network Security Platform, the FortiSwitch Secure Access switches can be managed directly from the familiar FortiGate interface. This single pane of glass management provides complete visibility and control of all users and devices on the network, regardless of how they connect. When a device connects to a Secure Access Switch Ethernet port, it is first identified, and then the user is authenticated. Once authenticated, access to the network is granted based on pre-defined security policy from the FortiGate, ensuring secure network access across the enterprise, without impacting the user experience. Secure Managed Switches for Wire Closet Installation The FortiSwitch 548D-FPOE, 224D-FPOE, 224D-POE, 124D and 124D-POE switches are ideal for the next generation applications, where increased productivity can be achieved through faster network access speeds via dedicated Gigabit Ethernet ports. With a compact 1RU form factor, these switches are ideally suited for high density enterprise or classroom wire closet installations, delivering a truly secure network access platform for wired Ethernet devices. Simple Network Deployment and Compliance The Power over Ethernet (PoE) capability enables simple installation of wireless Access Points and IP phones in the network, with power and data being delivered over the same network cable. There is no need to contract electricians to install power for your PoE capable devices anymore, reducing your overall network TCO. By leveraging the FortiSwitch VLAN segmentation feature of the switches, enterprise networks can support the convergence of voice, data and wireless traffic onto a single network platform. FortiSwitch network segmentation can even be managed from the FortiGate interface, simplifying the process of meeting compliance requirements for data separation. FortiSwitch Secure Access switches deliver outstanding security, performance and manageability for threat conscious small to mid-sized businesses, distributed enterprises and branch offices. Highlights Secure Access switches suitable for wire closet and desktop installations. Devices are identified and users authenticated prior to being granted access to the network. Centralized security management and reporting from FortiGate interface. Up to 48 ports in a compact 1 RU form factor. Power over Ethernet capable, including PoE+. Ideal for converged network environments; enabling voice, data and wireless traffic to be delivered across a single network. FortiCare Worldwide 24x7 Support support.fortinet.com FortiGuard Security Services

2 Key Features & Benefits Single Management Framework Single Policy Provisioning Centralized Authentication Role-Based Ports Reduces complexity and decreases management cost with network security functions managed through a single console. The same security policy can apply to a user or device regardless of how or where they connect to the network.enables access to certain network ports based on the role of a user within the organization, such as in shared conference rooms or engineering facilities. All users are authenticated against the same user database, regardless of whether they connect to the wired or wireless network, including temporary guest users. Enables access to certain network ports based on the role of a user within the organization, such as in shared conference rooms or engineering facilities. CAPABILITIES: FORTILINK MODE VS. STANDALONE MODE FS-108D-POE*, FS-124D*, FS-124D-POE*, FS-224D-FPOE*, FS-224D-POE* and FS-548D-FPOE* STANDALONE SWITCH FORTILINK MODE (FORTIGATE) Security 802.1x Port Authentication MAC Address-Based Authentication No MAC Black/White Listing No Layer 3,4 Stateful Firewall to Control Access No TACACS+/RADIUS Admin Access DHCP Relay/DHCP Snooping No Virtual Domain No Routing Layer 3, Dynamic Routing No Inter-VLAN Routing No Policy-Based Routing No DNS Server No Management Auto Discovery of Multiple Switches 1 16 (model dependent) Software Upgrade of Switches 1 switch Central upgrade of each switch VLAN Configuration 1 switch Central VLAN provisioning of entire switch network Policy Control of Users and Devices No Syslog Collection (FortiGate syslog only) Switch POE Control No** LAG support from FortiSwitch to FortiGate No** UTM Features Firewall No IPS, AV, Application Control No * For -D- models there is a dependency on the software version running on the FortiSwitch and on the FortiGate in order to use FortiLink mode. FortiLink is only enabled on certain ports on FortiGate and FortiSwitch. Refer to FortiLink documentation. Note: Please refer to FortiSwitch Admin Guide for details re: port connections supported for FortiLink functionality. ** Roadmap FortiSwitch deployment example PoE power for phones Desktop Connectivity Data Center Application PoE power for FortiAP Server Farm FortiSwitch 224D-FPOE, 224D-POE, 108D-POE, or 124D/124D-POE LAN Wire Closet Access Edge Policies are controlled by FortiGate FortiSwitch 548D-FPOE MDF 10 Gbps uplinks Core Switch FortiGate Data Center FortiGate 2

3 SOFTWARE FEATURES (STANDALONE MODE) Layer 2 Jumbo Frames Auto-negotiation for port speed and duplex IEEE 802.1D MAC Bridging/STP (will interoperate) IEEE 802.1w Rapid Spanning Tree Protocol (RSTP, will interoperate) IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) IEEE 802.1p Mapping to Priority Queue Edge Port / Port Fast IEEE 802.1Q VLAN Tagging Private VLAN FS-108D-POE*, FS-124D*, FS-124D-POE*, FS-224D-FPOE*, FS-224D-POE* and FS-548D-FPOE* Not supported Not supported on FS-108D-POE, FS-224D-POE IEEE 802.3ad Link Aggregation with LACP Unicast/Multicast traffic balance over trunking port (dst-ip, dst-mac, src-dst-ip, src-dst-mac, src-ip, src-mac) (MAC only) IEEE 802.1AX Link Aggregation IEEE 802.3x Flow Control and back-pressure IEEE Base-T IEEE 802.3u 100Base-TX IEEE 802.3z 1000Base-SX/LX IEEE 802.3ab 1000Base-T 802.3ae 10 Gigabit Ethernet Not supported CSMA/CD Access Method and Physical Layer Specifications IEEE 802.3af-2003/2009 POE Not supported on FS-124D Layer 3 Static Routing (Management Access only) Security Port Mirroring Admin Authentication Via RFC 2865 RADIUS Supports Fortified Access (FortiLink) mode 802.1x authentication with port-based assignment Management Telnet / SSH HTTP / HTTPS SNMP v1/v2c SNTP LLDP (802.1ab, Link Layer Discovery Protocol) (receive only) Standard CLI and web GUI interface Software download/upload: TFTP/FTP/GUI RFC and MIB Support** RFC 2571 Architecture for Describing SNMP Framework DHCP Client RFC 854 Telnet Server RFC 2865 RADIUS RFC 1643 Ethernet-like Interface MIB RFC 3176 sflow RFC 1213 MIB-II RFC 1354 IP Forwarding Table MIB RFC 2572 SNMP Message Processing and Dispatching RFC 1573 SNMP MIB II RFC 1157 SNMPv1/v2c RFC 2030 SNTP ** Note: Check release notes for software feature availability. ** MIBs have been tested with Solarwinds NPM tool. Not supported 3

4 SPECIFICATIONS Hardware Specifications Total Network Interfaces FORTISWITCH 124D FORTISWITCH 124D-POE FORTISWITCH 224D-POE FORTISWITCH 224D-FPOE 24x GE/RJ45 ports and 2x GE SFP ports 24x GE/RJ45 ports and 2x GE SFP ports 20x GE RJ45 ports and 4x GE RJ45/SFP combo ports** 24x GE RJ45 ports and 4x GE SFP ports** Dedicated Management 10/100/1000 Ports RJ-45 Serial Console Port Form Factor 1 RU Rack Mount Appliance 1 RU Rack Mount Appliance 1 RU Rack Mount 1 RU Rack Mount Power over Ethernet (PoE) Ports 0 12 (802.3af/802.3at) 12 (802.3af) 24 (802.3af/802.3at) PoE Power Budget W 180 W (802.11af) 370 W Mean Time Between Failures > 10 years > 10 years > 10 years > 10 years System Specifications Switch Type Web and CLI Managed Web and CLI Managed Web and CLI Managed Web and CLI Managed Switching Capacity 52 Gbps 52 Gbps 48 Gbps 56 Gbps Packets Per Second 104 Mpps 104 Mpps 96 Mpps 112 Mpps MAC Address Storage 8K 16K 16K 16K Network Latency < 1µs < 1µs < 2µs < 1µs VLANs Supported 4K 4K 4K 4K Link Aggregation Group Size Total Link Aggregation Groups Packet Buffers 1.5 MB 1.5 MB 1 MB 1.5 MB Dimensions Height x Width x Length (inches) 1.7 x 5.5 x x 17.3 x x 17.3 x x 12.2 x 17.3 Height x Width x Length (mm) 44 x 140 x x 330 x x 440 x x 310 x 440 Weight 3.74 lbs (1.7 kg) lbs (8.8 kg) 8.49 lbs (3.85 kg) lbs (4.83 kg) Environment Power Required V AC, Hz V AC, Hz V AC, Hz V AC, Hz Power Supply AC built in AC built in + RPS option AC built in AC built in + RPS option Power Consumption (Average / Maximum) 14 W / 19 W 19 W / 131 W 190 W / 225 W 380 W / 397 W Heat Dissipation BTU/h 448 BTU/h BTU/h 85 BTH/h Operating Temperature F (0 50 C) F (0 50 C) F (0 40 C) F (0 50 C) Storage Temperature F ( C) F ( C) F ( C) F ( C) Humidity 10 90% non-condensing 10 90% non-condensing 10 90% non-condensing 10 90% non-condensing Certification and Compliance Warranty Fortinet Warranty ** Fortinet Warranty Policy: ** Routed ports only FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2 Limited lifetime* warranty on all models FortiSwitch 124D FortiSwitch 224D-POE FortiSwitch 224D-FPOE 4

5 SPECIFICATIONS FORTISWITCH 108D-POE Hardware Specifications Total Network Interfaces 8x GE RJ45 ports and 2x GE RJ45/SFP combo ports Dedicated Management 10/100/1000 Ports 0 RJ-45 Serial Console Port 0 Form Factor 1 RU Rack Mount Power over Ethernet (PoE) Ports 8 (802.3af) PoE Power Budget 75 W Mean Time Between Failures > 10 years System Specifications Switch Type Web and CLI Managed Switching Capacity 20 Gbps Packets Per Second 40 Mpps MAC Address Storage 16K Network Latency < 2µs VLANs Supported 4K Link Aggregation Group Size 8 Total Link Aggregation Groups 4 Packet Buffers 1 MB Dimensions Height x Width x Length (inches) 1.7 x 7.9 x 13 Height x Width x Length (mm) 44 x 200 x 330 Weight 4.19 lbs (1.9 kg) Environment Power Required V AC, Hz Power Supply AC built in Power Consumption (Average / Maximum) 52.8 W / 95.1 W Heat Dissipation BTU/h Operating Temperature F (0 45 C) Storage Temperature F ( C) Humidity 5 90% non-condensing Certification and Compliance FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2 Warranty Fortinet Warranty Limited lifetime* warranty on all models * Fortinet Warranty Policy: FortiSwitch 108D-POE 5

6 SPECIFICATIONS FORTISWITCH 548D-FPOE Hardware Specifications Total Network Interfaces 48x GE/RJ45 ports and 4x 10 GE SFP+ ports and 2x 40 GE QSFP Dedicated Management 10/100/1000 Ports 0 RJ-45 Serial Console Port 1 Form Factor 1 RU Rack Mount Power over Ethernet (PoE) Ports 48 PoE Power Budget 750 W Mean Time Between Failures > 10 years System Specifications Switch Type Web and CLI Manage Switching Capacity 336 Gbps Packets Per Second 512 Mpps MAC Address Storage 96K Network Latency < 2µs VLANs Supported 4K Link Aggregation Group Size 24 Total Link Aggregation Groups 26 Packet Buffers 4 MB Dimensions Height x Width x Length (inches) 1.7 x 13.8 x 17.3 Height x Width x Length (mm) 44 x 310 x 440 Weight lbs (7.14 kg) Environment Power Required V AC, Hz Power Supply AC PSU Power Consumption (Average / Maximum) 925 W / 961 W (full POE load) Heat Dissipation 3160 BTU/h (full POE loading) Operating Temperature F (0 45 C) Storage Temperature F ( C) Humidity 5 95% non-condensing Certification and Compliance Warranty Fortinet Warranty Limited lifetime* warranty on all models * Fortinet Warranty Policy: FortiSwitch 548D-FPOE 6

7 ORDER INFORMATION Product SKU Description FortiSwitch 108D-POE FS-108D-POE L2 PoE Switch 8x GE RJ45 ports (including 8x PoE ports with 75 W power budget), 2x shared media pairs (including 2x GE RJ45, 2x GE SFP slots), FortiGate switch controller compatible. FortiSwitch 124D FS-124D L2 Switch 24x GE RJ45 ports, 2x GE SFP slots. Fanless switch. FortiGate switch controller compatible. FortiSwitch 124D-POE FS-124D-POE L2 PoE Switch 24x GE RJ45 ports (including 12x PoE+ ports with 100 W power budget), 2x GE SFP slots, FortiGate switch controller compatible. FortiSwitch 224D-FPOE FS-224D-FPOE L2 POE+ Switch 24x GE RJ45 ports, 2x 1 GE SFP slots. FortiSwitch 224D-POE FS-224D-POE L2 PoE Switch 20x GE RJ45 ports (including 12x PoE ports with 185 W power budget), 4x shared media pairs (including 4x GE RJ45, 4x GE SFP slots), FortiGate switch controller compatible. FortiSwitch 548D-FPOE FS-548D-FPOE L2 POE+ Switch 48x GE RJ45 ports, 4x 10 GE SFP+ slots, 2x 40 GE QSFP+ slots. Accessories 1 GE SFP RJ45 Transceiver Module FG-TRAN-GC 1 GE SFP RJ45 transceiver module for all systems with SFP and SFP/SFP+ slots. 1 GE SFP SX Transceiver Module FG-TRAN-SX 1 GE SFP SX transceiver module for all systems with SFP and SFP/SFP+ slots. 10 GE SFP+ Transceiver Module, Short Range FG-TRAN-SFP+SR 10 GE SFP+ transceiver module, short range for all systems with SFP+ and SFP/SFP+ slots 10 GE SFP+ Transceiver Module, Short Range FS-TRAN-SFP+SR 10 GE SFP+ transceiver module, short range for FortiSwitch (D-series) with SFP+ and SFP/SFP+ slots. 1 GE SFP RJ45 Transceiver Module FS-TRAN-GC 1 GE SFP RJ45 transceiver module for FortiSwitch (D-series) with SFP and SFP/SFP+ slots. External Redundant AC Power Supply FRPS-100* External redundant AC power supply for up to 4 units: FG-300C, FG-310B, FS-348B and FS-448B. Up to 2 units: FG-200B, FG-200D, FG-240D, FG-300D, FG-500D, FDD-200B, FDD-400B and FDD-800B. Not supported for: FG-200D-POE/240D-POE. FRPS-740** External redundant AC power supply for up to 2 units: FS-124D-POE and FS-224D-FPOE. ** Works with the FS-448B and FS-348B. ** Works with the FS-124D-POE only. GLOBAL HEADQUARTERS Fortinet Inc. 899 Kifer Road Sunnyvale, CA United States Tel: EMEA SALES OFFICE 120 rue Albert Caquot 06560, Sophia Antipolis, France Tel: APAC SALES OFFICE 300 Beach Road The Concourse Singapore Tel: LATIN AMERICA SALES OFFICE Prol. Paseo de la Reforma 115 Int. 702 Col. Lomas de Santa Fe, C.P Del. Alvaro Obregón México D.F. Tel: (55) Copyright 2015 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary and may be significantly less effective than the metrics stated herein. Network variables, different network environments and other conditions may negatively affect performance results and other metrics stated herein. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet and any such commitment shall be limited by the disclaimers in this paragraph and other limitations in the written contract. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet s internal lab tests, and in no event will Fortinet be responsible for events or issues that are outside of its reasonable control. Notwithstanding anything to the contrary, Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. FST-PROD-DS-SW3 FS-SA-D-DAT-R